Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: bMr1XkIO1GUe2jUD4dwJYfLJ+j1JdxOHzjEVY4q4wps=
Subject key identifier: 78:ED:A2:DA:9A:FE:22:0F:13:74:93:79:E4:85:0B:8A:3A:53:16:16
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019DCF3E06B8760F5252B1CFBDAB4CA6BA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0839
Signing time: Mon 27 Apr 2026 14:00:41 +0000
Manifest this update: Mon 27 Apr 2026 14:00:41 +0000
Manifest next update: Tue 28 Apr 2026 14:00:41 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: WLKb+t3O17KshtZ1fejSyVC2AQwSQdpUmi3Je94b+lc=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:06:b8:76:0f:52:52:b1:cf:bd:ab:4c:a6:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Apr 27 14:00:41 2026 GMT
Not After : Apr 28 14:00:41 2026 GMT
Subject: CN=78eda2da9afe220f13749379e4850b8a3a531616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:13:a8:36:b8:9c:f6:a7:d1:ef:88:d9:53:
fd:5b:c1:73:42:7d:83:fe:c1:9b:7b:0c:01:77:f7:
0c:c5:33:9b:ec:9e:c4:7c:a5:78:92:84:59:c2:83:
f7:b6:a7:11:5f:9f:2e:ea:ef:69:23:27:7c:95:a6:
c4:bf:f9:4e:55:09:9e:e0:fd:fc:7b:3b:58:49:cb:
11:ac:76:a0:ff:d3:c5:62:e9:40:e3:f5:54:3a:a5:
86:37:15:70:90:f1:f0:6c:3d:49:12:8f:d9:11:9f:
44:55:97:4a:0e:e1:d6:fd:f1:cb:2b:1f:74:a8:e4:
92:8b:63:28:59:ee:93:dd:b2:39:61:a4:5c:df:96:
ae:d1:f7:57:e1:38:68:3f:d1:8f:eb:dd:a7:3c:87:
a4:83:68:ea:b1:95:29:92:d4:3f:fc:48:a6:99:03:
04:b5:26:c3:df:47:96:8a:d9:90:25:32:5c:bb:70:
d8:ef:5b:49:3d:aa:91:f5:ec:95:44:48:3d:60:27:
62:6d:97:6f:25:17:19:23:fb:02:d8:0a:59:11:6d:
86:12:18:ce:1d:27:c9:53:23:3c:d7:76:9b:61:04:
d8:32:b1:93:30:78:05:84:74:ba:cf:18:95:50:23:
de:97:37:8c:07:0b:cc:06:fb:50:a2:bf:ab:0b:31:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:A2:DA:9A:FE:22:0F:13:74:93:79:E4:85:0B:8A:3A:53:16:16
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:ae:2b:fa:37:f3:25:9c:01:7f:43:46:c1:d4:66:23:c2:
d5:73:5c:14:e1:7d:d4:e6:86:0b:3c:b6:51:84:c0:45:5a:c3:
80:36:23:20:3a:67:af:0a:de:46:b5:31:c6:f1:d8:ab:1a:db:
e3:2e:7b:c4:26:7b:87:68:9a:df:e4:11:db:5a:a8:6c:01:d7:
d2:53:53:5d:67:af:c3:8a:6d:04:09:bc:55:62:57:12:59:bf:
c9:ae:84:d9:e6:b1:b3:7d:c6:bc:f4:8d:ff:6f:0b:16:41:3d:
40:8d:1c:b6:b7:72:85:fd:a8:26:a5:8c:b7:fc:9c:fd:2b:d2:
1a:eb:91:ce:53:c0:e0:38:16:d2:58:3c:8e:bb:54:78:aa:05:
8f:f7:22:28:63:d2:31:b1:75:65:71:c1:73:38:04:d3:b5:20:
c1:c6:b4:16:a8:0a:e9:d4:b6:de:65:53:b6:59:8a:e0:1a:04:
ec:e1:bb:16:00:b9:e5:dc:b6:5b:88:24:95:d7:2b:26:cb:6f:
90:02:e7:81:d4:84:5f:c0:78:56:ad:21:02:8d:c7:0b:19:64:
dd:b5:86:e1:1b:e0:69:78:1a:0e:b9:17:d3:8e:15:ba:99:3b:
a6:d3:ea:73:e0:0c:72:c7:d3:d7:e7:ca:ce:a3:48:c9:c8:aa:
5c:e5:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:25:06 2026 by rpki-client